AI-200 Security And Observability Practice Question
Your Azure Machine Learning workspace is secured inside a virtual network with private endpoints. To ensure that data scientists can securely train models and access data stores without exposing resources to the public internet, which THREE of the following configurations must be established? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Private endpoints for associated Azure Storage accounts, Key Vault, and Azure Container Registry.
Securing workspaces requires private endpoints for the workspace storage accounts/key vault, disabling public network access, and configuring peered virtual networks or Azure Bastion/VPN for workspace access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Private endpoints for associated Azure Storage accounts, Key Vault, and Azure Container Registry.
Why this is correct
Correct. Dependent services of an AML workspace must also be secured with private endpoints.
- ✓
Disabling public network access on the Azure Machine Learning workspace resource.
Why this is correct
Correct. Disabling public access prevents external internet access to the workspace.
- ✓
Configuring Azure Bastion or ExpressRoute/VPN for secure developer access to private compute instances.
Why this is correct
Correct. Secure hybrid connectivity allows developers to access private compute instances.
- ✗
Public IP addresses assigned directly to every compute instance for direct SSH debugging.
Why it's wrong here
Incorrect. Public IPs on compute instances violate the virtual network isolation requirement.
- ✗
Enabling anonymous public scoring endpoints for all model deployments.
Why it's wrong here
Incorrect. Anonymous public scoring endpoints compromise security and data privacy.
About these practice questions
One of 507 original AI-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.